I recently came up against this with my wife's new Android phone. Fortunately, you can switch the MAC randomization off per specific WiFi network, so...
I looked at Pfsense and OPNsense before I went with Untangle HomePro... It seemed that to get close to what Untangle does, you'd have to spend a bit...